A vulnerability in the Linux kernel nvme-apple driver may lead to a kernel panic and potential system instability during device removal.

This is a memory management flaw where the nvme-apple driver fails to properly destroy the admin queue during controller removal. This results in the system attempting to execute timeout work on a queue that has already been freed, triggering a kernel panic (oops) that can be triggered by unauthenticated local users if the controller fails to initialize.

The primary impact of this vulnerability is a denial of service resulting from a kernel panic. While the CVSS score of 7.4 indicates high severity, the requirement for specific hardware conditions (Apple M1/M2/M3 based systems using the nvme-apple driver) and a controller failure scenario limits the broader business risk to system availability and potential data loss if the panic occurs during active I/O operations.

Immediate Action: Update your Linux kernel to version 6.6.157, 6.12.110, 6.18.52, or 7.2.6 or later, as these versions contain the necessary fix for the admin queue destruction logic.

Proactive Monitoring: Monitor system logs for kernel warnings related to block device timeouts or "blk_mq_release" errors, which may indicate an impending crash.

Compensating Controls: Ensure that hardware drivers are kept up to date via your distribution's stable patch cycle and restrict physical access to systems utilizing Apple Silicon hardware to prevent unauthorized trigger attempts.

Public Exploit Available: Unknown

Although the conditions required to trigger this vulnerability are specific, kernel-level instability poses a significant risk to system uptime and data integrity. Administrators managing Linux systems on Apple Silicon hardware should prioritize testing and deploying the identified kernel updates during their next scheduled maintenance window to ensure the stability of the nvme-apple driver.